Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
File:                     53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json)
Hash identifier:          lLHwT53ihxLCx3DCFpPhkhuMOhoVMYJrQX4FOzrRJNI=
Subject key identifier:   0B:10:08:98:4F:7E:8B:C7:DB:B8:03:E0:30:44:FE:DD:B6:73:18:46
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       019883C3E83EBAF328F6211217A0C68F6865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
Manifest number:          0CFA
Signing time:             Thu 07 Aug 2025 09:01:50 +0000
Manifest this update:     Thu 07 Aug 2025 09:01:50 +0000
Manifest next update:     Fri 08 Aug 2025 09:01:50 +0000
Files and hashes:         1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: T8CqHXL6Z6xz/r+BPxIS71DO1B6G5gtr1nqDNKKMx3o=)
                          2: EC7CG7vDGWKuQugmwYX02eAcLyQ.roa (hash: NeWqCf30d/nzXO3lh6RSwAe3lyCWu1HWylCk2It8npM=)
                          3: ZABIQATF12aikgC1O0hDBVjOfyU.roa (hash: DodKV5kgcQUZQo+3v/CpLgDA9tUlP1X5Qg4/U91seR4=)
                          4: c5GR0CvkfkgJP50hkVwQxiZA7C8.roa (hash: H+OOhfte4ViJLC2qWeoEPiaOcajpT6H91Tk+JZt70Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:c3:e8:3e:ba:f3:28:f6:21:12:17:a0:c6:8f:68:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Aug  7 09:01:50 2025 GMT
            Not After : Aug  8 09:01:50 2025 GMT
        Subject: CN=0b1008984f7e8bc7dbb803e03044feddb6731846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:66:4a:01:ad:73:72:4b:26:d7:f0:85:ef:
                    0a:38:d5:d1:94:18:f0:f7:5a:56:21:29:7d:be:b1:
                    44:92:3d:c6:1b:63:09:4f:45:a7:f6:77:69:f6:7e:
                    a8:f6:f7:7b:52:f3:48:c0:2c:df:e6:21:ea:6f:69:
                    3f:63:bd:ff:27:75:1c:24:53:cc:7d:ad:a2:16:85:
                    ec:f6:80:58:5c:43:62:31:33:e9:0a:6a:9b:60:3f:
                    ad:22:26:2e:e0:72:67:2f:2a:72:66:50:0a:d8:dd:
                    2f:42:31:4a:aa:15:81:d4:7b:90:04:33:5c:43:21:
                    b2:1c:5f:24:34:14:c4:3b:08:4c:ef:f5:1b:ea:e9:
                    32:b3:32:71:7e:3d:32:c7:b8:f8:06:21:b8:09:8b:
                    ae:65:54:f7:53:49:6f:f2:b8:de:32:e8:69:30:e3:
                    3e:bb:e3:32:9e:20:97:f5:0f:f3:1e:85:20:6b:e5:
                    df:f9:6e:f4:a0:6f:c1:d2:4e:9b:9b:59:17:e3:bb:
                    7e:f1:82:d8:e9:bb:98:90:c6:23:20:f4:e8:60:c3:
                    ea:0b:dc:cd:65:29:86:9e:c0:8b:b2:4d:8c:7f:9d:
                    49:71:80:39:cc:fa:31:c1:f2:1a:e5:09:4d:a2:d9:
                    be:6b:3e:73:ce:d1:51:7b:a0:a4:9e:e9:51:44:39:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:08:98:4F:7E:8B:C7:DB:B8:03:E0:30:44:FE:DD:B6:73:18:46
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:2c:80:a1:fa:d9:05:80:b0:96:c8:cd:08:6c:7a:84:e7:
         fd:95:18:c9:f8:29:a1:04:45:98:15:d2:4b:44:32:b2:32:14:
         5c:35:04:97:ed:14:9b:f7:28:dc:9d:c4:7e:c4:b8:fb:1a:af:
         7e:0f:31:0d:53:74:26:48:81:49:6f:39:8e:bf:dc:f3:9c:f0:
         76:bc:f7:61:e8:dc:ed:05:7b:56:bf:a5:44:06:04:ed:95:83:
         0b:7b:77:ed:ec:ee:38:ce:90:3c:e4:f9:09:f5:49:9d:76:ad:
         92:14:42:5a:36:22:a7:3b:e6:67:b1:12:68:aa:5e:46:ae:0e:
         a0:55:7f:4f:01:34:73:af:5a:e1:73:31:7f:ee:52:32:2f:c4:
         3e:75:42:71:9f:27:b1:c4:cf:45:e3:72:63:e1:80:c6:be:32:
         bb:5c:39:e8:35:c5:5b:ff:a2:d2:06:7f:fd:a1:42:07:07:e1:
         fb:55:42:01:3d:2b:bc:7a:d7:14:28:54:d0:19:6e:37:17:ee:
         38:64:31:7c:1b:54:ca:bf:a4:f1:10:3d:1c:52:66:8d:a6:69:
         e4:33:2c:e5:57:b2:bb:18:83:5c:3c:a0:61:15:e6:eb:f6:cf:
         51:d8:c3:28:13:7f:c0:85:50:21:2b:2a:cb:5b:a1:26:a4:a6:
         28:75:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:59 2025 by rpki-client